Chapter 6 - Risk Management: Assessing Risk

Question 1

It is the ___________ group’s responsibility to ensure that the RM process is in complete compliance with all

Accepted Answer

Governance

Question 2

What is the Greatest Risk to Cybersecurity?

Accepted Answer

Human Error or Lack of Knowledge

Question 3

Whereas the RM policy focuses on the “who and why” of RM, the plan is focused on the “who and how”.

Accepted Answer

True

Question 4

Risk management policy is the assessment of the amount of risk an organization is willing to accept.

Accepted Answer

False

Question 5

Knowing your enemy can help you better your security.

Accepted Answer

True

Question 6

Risk finds its way into the daily operations of every organization.

Accepted Answer

True

Question 7

If any specific vulnerability is completely managed by an existing control, it needs to be considered for add

Accepted Answer

False

Question 8

When operating any kind of organization, there are no threats or risk involved.

Accepted Answer

False

Question 9

Which of the following is NOT a well-defined characteristic of risk appetite?

Accepted Answer

Is not reviewed and reconsidered

Question 10

Which of the following is NOT a way to improve cybersecurity?

Accepted Answer

Not filtering your email inbox

Question 11

IT management must support the RM function by providing reps that understand how the business areas of the org use info

Accepted Answer

False

Question 12

Residual risk: the risk to information assets that remains even after the current controls have been applied

Accepted Answer

True

Question 13

Which community of interest is responsible for building and secure systems and ensuring safe operation?

Accepted Answer

IT

Question 14

Which of the following is NOT included in the RM Policy?

Accepted Answer

Goals and Plans

Question 15

Uncertainty is an estimate made by the manager using judgment and experience

Accepted Answer

True

Question 16

The document that contains specifications for the implementation and conduct of the RM efforts is referred to as the

Accepted Answer

The RM plan

Question 17

Sun Tzu said "One who knows the enemy and knows himself will not be in danger in a hundred battles"

Accepted Answer

True

Question 18

Threats are specific avenues that threat agents can exploit to attack an information asset

Accepted Answer

False

Question 19

InfoSec managers and technicians are NOT the defenders of information

Accepted Answer

False

Question 20

Managers must be fully prepared to _______ ______ that pose risk to the organization and the security of its assets.

Accepted Answer

identify threats

Question 21

Guiding the development of, and formally approving, the RM policy is a part of what group?

Accepted Answer

Governance

Question 22

The CEO, CISO, COO and CIO all belong to the General managment and users community.

Accepted Answer

True

Question 23

Assessing the relative risk for each vulnerability is accomplished via a process called________.

Accepted Answer

risk analysis

Question 24

What is Risk Management

Accepted Answer

the process of discovering and assessing the risk

Question 25

The RM Framework consist of how many key stages?

Accepted Answer

5

Chapter 6 - Risk Management: Assessing Risk

Questions 25

Chapter 6 - Risk Management: Assessing Risk

Questions 25